Email: 536712 Autolearn: 0 AvgScore: 1.68 AvgScanTime: 0.85 sec Spam: 97051 Autolearn: 0 AvgScore: 13.40 AvgScanTime: 1.26 sec Ham: 439661 Autolearn: 0 AvgScore: -0.90 AvgScanTime: 0.76 sec Time Spent Running SA: 126.86 hours Time Spent Processing Spam: 33.93 hours Time Spent Processing Ham: 92.93 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 94024 99.25 96.88 99.78 2 HTML_MESSAGE 90314 44.92 93.06 34.29 3 DKIM_SIGNED 90110 43.83 92.85 33.01 4 XM_DK_Pass 87320 42.95 89.97 32.56 5 DKIM_VALID 86260 42.56 88.88 32.33 6 XM_B_Unicode 82044 40.10 84.54 30.29 7 RELAYCOUNTRY_US 77428 41.89 79.78 33.53 8 XMListUnsubscribeExists 74859 33.90 77.13 24.35 9 DCC_CHECK 70943 27.67 73.10 17.64 10 XM_B_SpammyWords 68844 28.63 70.94 19.29 11 DKIM_VALID_AU 66460 35.17 68.48 27.82 12 XM_DK_Undo_02 47853 11.49 49.31 3.14 13 XM_B_Unicode3 43445 23.79 44.77 19.16 14 XM_B_SpammyWords2 39289 14.51 40.48 8.78 15 BAYES_99 38159 9.14 39.32 2.48 16 LOC_TINY_FONT_1 37873 17.88 39.02 13.22 17 TR_XM_DKIM_Undo 36432 7.98 37.54 1.46 18 HTML_FONT_LOW_CONTRAST 34950 17.99 36.01 14.01 19 RCVD_IN_MSPIKE_H2 31923 16.20 32.89 12.51 20 FVGT_m_MULTI_ODD 31728 15.66 32.69 11.90 21 BAYES_50 31322 42.44 32.27 44.69 22 BAYES_999 29657 7.10 30.56 1.93 23 DKIM_VALID_EF 29052 15.49 29.93 12.30 24 TR_DCC_Bayes_99 28456 6.16 29.32 1.05 25 MIME_HTML_ONLY 26988 11.65 27.81 8.09 26 T_KAM_HTML_FONT_INVALID 26519 11.99 27.32 8.60 27 DCC_CHECK_NEGATIVE 26097 72.32 26.89 82.34 28 TR_XM_DK_Unsub 22491 9.74 23.17 6.77 29 T_TM2_M_HEADER_IN_MSG 20645 11.28 21.27 9.07 30 RELAYCOUNTRY_META 20400 5.32 21.02 1.85 31 XMSubLong 18770 11.56 19.34 9.84 32 XM_Multi_Part_URI 17291 8.93 17.82 6.97 33 TR_XM_SpammyRelay 16395 3.88 16.89 1.01 34 TR_MAX_INTL_RELAY 14951 5.58 15.41 3.42 35 TR_XM_SpammyWords2 14857 3.08 15.31 0.38 36 RCVD_IN_BL_SPAMCOP_NET 13682 2.81 14.10 0.32 37 XM_B_Unsub 13505 5.30 13.92 3.40 38 XM_B_SpammyWords3 13282 4.61 13.69 2.60 39 TR_XM_BayesUnsub 13144 4.78 13.54 2.85 40 UNPARSEABLE_RELAY 12804 6.28 13.19 4.76 41 LOTS_OF_MONEY 12369 4.32 12.74 2.46 42 BOTNET_IPINHOSTNAME 12363 4.26 12.74 2.39 43 RELAYCOUNTRY_CA 12211 2.94 12.58 0.81 44 TR_XM_SPAMCOP 11123 2.22 11.46 0.18 45 TR_XM_SpammyWords4 10944 3.51 11.28 1.79 46 BAYES_80 9260 3.37 9.54 2.01 47 RCVD_IN_MSPIKE_WL 8392 3.64 8.65 2.54 48 RCVD_IN_MSPIKE_H3 8392 3.64 8.65 2.54 49 BAYES_60 7711 5.41 7.95 4.85 50 XMBody_17 7585 1.76 7.82 0.42 51 BOTNET 7582 1.85 7.81 0.54 52 TR_XM_UnparsRelay 7491 2.01 7.72 0.75 53 XM_UncommonTLD01 7368 3.01 7.59 1.99 54 XM_Evil_Numbers_Gen 6974 4.45 7.19 3.84 55 HTML_IMAGE_RATIO_02 6697 3.39 6.90 2.61 56 XM_Body_Dirty_Words 6593 2.63 6.79 1.71 57 FSL_BULK_SIG 6353 2.24 6.55 1.28 58 XM_SPF_SoftFail 5843 1.95 6.02 1.05 59 XMNumbers 5827 2.47 6.00 1.68 60 XM_H_GMP 5579 3.76 5.75 3.32 61 TooManyTo_001 5564 3.54 5.73 3.06 62 XMSubMetaSx_00 5272 2.49 5.43 1.84 63 MPART_ALT_DIFF 5254 2.34 5.41 1.66 64 BAYES_95 5247 2.13 5.41 1.41 65 LotsOfNums_01 5216 3.50 5.37 3.08 66 UNTRUSTED_Relay 4898 1.55 5.05 0.77 67 SpammyFromTLD_01 4839 1.11 4.99 0.26 68 TR_XM_PHPForged 4795 0.99 4.94 0.12 69 HTML_IMAGE_RATIO_04 4749 2.66 4.89 2.17 70 TR_XM_PHPDW 4722 0.97 4.87 0.11 71 TR_XM_FormFill2 4636 0.96 4.78 0.12 72 XM_H_PHPOS 4630 0.95 4.77 0.10 73 T_FILL_THIS_FORM_SHORT 4603 1.06 4.74 0.25 74 XM_B_Investor 4532 1.42 4.67 0.70 75 RCVD_IN_VALIDITY_SAFE 4393 3.84 4.53 3.68 76 T_XMDrugObfuBody_14 4329 1.43 4.46 0.77 77 XMStrtUSub 4176 3.05 4.30 2.77 78 XM_H_Long_From01 4122 2.56 4.25 2.18 79 XMSexyCombo_05 3963 1.73 4.08 1.22 80 XM_OfRef6 3962 1.13 4.08 0.48 81 TR_LOTS_OF_MONEY3 3903 0.94 4.02 0.26 82 DKIM_INVALID 3850 1.27 3.97 0.67 83 USER_IN_DEF_DKIM_WL 3715 7.56 3.83 8.38 84 TM2_M_URI_OPT_OUT 3711 1.37 3.82 0.83 85 TR_XM_SpammyWords5 3699 1.24 3.81 0.67 86 RCVD_IN_VALIDITY_CERTIFIED 3694 3.42 3.81 3.33 87 MIME_HTML_MOSTLY 3684 1.80 3.80 1.36 88 SCC_BODY_URI_ONLY 3594 25.85 3.70 30.74 89 XM_B_Phish_Phrases 3559 1.80 3.67 1.39 90 HTML_IMAGE_RATIO_06 3416 1.61 3.52 1.18 91 XM_URI_RBL 3375 0.68 3.48 0.06 92 TR_XM_PhishingBody 3208 1.27 3.31 0.82 93 TM2_M_VERY_LONG_WORD 3132 1.04 3.23 0.56 94 HTML_IMAGE_RATIO_08 3118 1.57 3.21 1.21 95 MIME_HTML_ONLY_MULTI 2988 1.27 3.08 0.87 96 TM2_M_BODY_EMPTY 2968 0.63 3.06 0.10 97 XMEmptyBody_01 2940 0.58 3.03 0.03 98 TR_XM_BayesRelay 2883 0.54 2.97 0.00 99 T_XMDrugObfuBody_08 2863 1.03 2.95 0.60 100 XM_CamelCaseFrm001 2839 1.34 2.93 0.99 101 TR_XM_FormFill 2834 0.54 2.92 0.01 102 XM_B_SpammyTLD 2787 1.41 2.87 1.09 103 SUBJ_ALL_CAPS 2456 0.74 2.53 0.35 104 RELAYCOUNTRY_AU 2443 0.61 2.52 0.19 105 XM_UB50 2336 0.79 2.41 0.43 106 XM_HighProb1 2286 0.43 2.36 0.00 107 XM_B_SpammyWords4 2272 0.70 2.34 0.34 108 FONT_INVIS_LONG_LINE 2271 0.43 2.34 0.01 109 FROM_EXCESS_BASE64 2252 1.14 2.32 0.88 110 T_TooManySym_01 2225 2.81 2.29 2.93 111 T_XMHurry_00 2213 0.74 2.28 0.40 112 DIET_1 2132 0.64 2.20 0.30 113 TR_XM_NoHeaderRelay 2091 0.42 2.15 0.04 114 BAYES_20 2075 1.34 2.14 1.16 115 AC_BR_BONANZA 2073 0.44 2.14 0.06 116 BAYES_40 2046 8.73 2.11 10.19 117 URI_TRY_3LD 1963 0.67 2.02 0.37 118 HTML_TAG_BALANCE_BODY 1773 0.55 1.83 0.26 119 XMReplyNow 1745 0.41 1.80 0.10 120 XMStockSpam_06 1736 0.89 1.79 0.69 121 XMBrknScrpt_02 1730 0.59 1.78 0.33 122 XMDiploma_00 1715 0.92 1.77 0.74 123 MIME_QP_LONG_LINE 1709 1.43 1.76 1.35 124 XM_B_Unsub2 1586 0.68 1.63 0.48 125 URI_HEX 1582 0.71 1.63 0.51 126 T_STY_INVIS_DIRECT 1534 0.39 1.58 0.13 127 HK_RANDOM_REPLYTO 1459 0.34 1.50 0.08 128 TR_XM_INV_DKIM 1426 0.30 1.47 0.04 129 XMPhish30 1392 0.47 1.43 0.25 130 XM_SendGrid 1376 0.68 1.42 0.51 131 THIS_AD 1375 0.41 1.42 0.18 132 T_REMOTE_IMAGE 1346 1.15 1.39 1.10 133 SpammyFromTLD_02 1311 0.30 1.35 0.06 134 MAILING_LIST_MULTI 1271 1.17 1.31 1.14 135 RCVD_IN_VALIDITY_RPBL 1271 0.26 1.31 0.02 136 TR_Mismatch_TLD_01 1243 0.32 1.28 0.11 137 XM_OfRef7 1232 0.26 1.27 0.04 138 ANY_BOUNCE_MESSAGE 1218 49.52 1.26 60.17 139 BOUNCE_MESSAGE 1217 49.52 1.25 60.17 140 KHOP_HELO_FCRDNS 1213 0.40 1.25 0.21 141 ALL_TRUSTED 1176 53.30 1.21 64.79 142 XM_DIRTYINTL 1143 0.24 1.18 0.04 143 MPART_ALT_DIFF_COUNT 1134 0.54 1.17 0.40 144 XMSubMetaI_00 1122 0.44 1.16 0.28 145 DKIM_ADSP_CUSTOM_MED 1116 0.49 1.15 0.34 146 XMBdyGiftCard01 1111 0.78 1.14 0.69 147 NML_ADSP_CUSTOM_MED 1049 0.37 1.08 0.22 148 DKIM_ADSP_NXDOMAIN 1044 0.34 1.08 0.18 149 T_XMDrugObfuBody_00 1035 0.39 1.07 0.24 150 AC_HTML_NONSENSE_TAGS 1030 0.20 1.06 0.01 151 FORGED_GMAIL_RCVD 1023 0.34 1.05 0.19 152 TR_XM_Base64_M1 1021 0.55 1.05 0.44 153 XM_H_Undi_Recip 1007 0.24 1.04 0.06 154 XM_DK_Undo_01 1000 0.75 1.03 0.69 155 RDNS_DYNAMIC 989 0.31 1.02 0.15 156 XMSlimDrugH 984 0.29 1.01 0.13 157 XMGenDplmaNmb 959 0.49 0.99 0.37 158 BOTNET_NORDNS 958 0.18 0.99 0.00 159 TR_Caps_n_Bayes_99 953 0.18 0.98 0.00 160 XM_H_PHPMailer 913 0.42 0.94 0.30 161 TR_Mismatch_TLD_02 913 0.20 0.94 0.03 162 XM_H_Long_From02 912 0.53 0.94 0.43 163 XM_Combo_Sbj 901 0.22 0.93 0.06 164 TR_XM_Base64_L1 897 0.23 0.92 0.08 165 TR_Sbj_FN_Bdy 895 0.21 0.92 0.05 166 TVD_RCVD_IP 893 1.10 0.92 1.14 167 BAYES_05 881 1.23 0.91 1.31 168 TR_Symld_Words 868 0.56 0.89 0.48 169 TR_XM_InvalidRelay 858 0.17 0.88 0.02 170 XMClaimOffer 852 0.25 0.88 0.12 171 SHOPIFY_IMG_NOT_RCVD_SFY 851 0.38 0.88 0.27 172 XMUrgent 850 0.22 0.88 0.08 173 TooManyTo_002 837 0.73 0.86 0.71 174 XM_UB99 832 0.16 0.86 0.00 175 TR_XM_DK_SendGrid 830 0.46 0.86 0.37 176 HTML_MIME_NO_HTML_TAG 829 0.57 0.85 0.50 177 XM_B_COPY_HTML 828 0.56 0.85 0.49 178 HELO_DYNAMIC_SPLIT_IP 827 0.16 0.85 0.01 179 TM2_M_OBFU_COMMENT 823 0.25 0.85 0.12 180 XM_Nigeria_01 804 0.16 0.83 0.02 181 TooManyTo_003 804 0.48 0.83 0.40 182 T_XMDrugObfuBody_10 796 0.16 0.82 0.02 183 PLING_QUERY 788 0.32 0.81 0.22 184 HTML_FONT_FACE_BAD 786 0.37 0.81 0.28 185 TR_MetaPhish_Combo_01 785 0.41 0.81 0.32 186 TR_XM_Undi_Recip19 783 0.18 0.81 0.04 187 XM_B_Phish66 783 0.25 0.81 0.12 188 TooManyTo_004 778 0.40 0.80 0.32 189 XM_ProductURIs 775 0.37 0.80 0.27 190 XM_B_REG_HTML 759 0.37 0.78 0.28 191 XMSexyCombo_01 735 0.21 0.76 0.08 192 XM_RXBody 725 0.24 0.75 0.13 193 RCVD_IN_IADB_LISTED 705 1.02 0.73 1.09 194 TooManyTo_005 694 0.34 0.72 0.26 195 XM_B_DNDMA 681 0.28 0.70 0.18 196 XMHTMLBadTable_001 655 0.22 0.67 0.12 197 UNDISC_MONEY 653 0.12 0.67 0.00 198 PDS_OTHER_BAD_TLD 646 0.17 0.67 0.06 199 TR_XM_Undi_RecipCombo2 643 0.12 0.66 0.00 200 HTTPS_HTTP_MISMATCH 632 0.27 0.65 0.18 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 438679 99.25 96.88 99.78 2 DCC_CHECK_NEGATIVE 362029 72.32 26.89 82.34 3 ALL_TRUSTED 284878 53.30 1.21 64.79 4 BOUNCE_MESSAGE 264563 49.52 1.25 60.17 5 ANY_BOUNCE_MESSAGE 264563 49.52 1.26 60.17 6 BAYES_50 196471 42.44 32.27 44.69 7 HTML_MESSAGE 150765 44.92 93.06 34.29 8 RELAYCOUNTRY_US 147404 41.89 79.78 33.53 9 DKIM_SIGNED 145121 43.83 92.85 33.01 10 XM_DK_Pass 143175 42.95 89.97 32.56 11 DKIM_VALID 142157 42.56 88.88 32.33 12 BAYES_00 140292 26.20 0.36 31.91 13 SCC_BODY_URI_ONLY 135133 25.85 3.70 30.74 14 XM_B_Unicode 133182 40.10 84.54 30.29 15 DKIM_VALID_AU 122309 35.17 68.48 27.82 16 XMListUnsubscribeExists 107076 33.90 77.13 24.35 17 XM_B_SpammyWords 84802 28.63 70.94 19.29 18 XM_B_Unicode3 84244 23.79 44.77 19.16 19 DCC_CHECK 77573 27.67 73.10 17.64 20 HTML_FONT_LOW_CONTRAST 61611 17.99 36.01 14.01 21 LOC_TINY_FONT_1 58108 17.88 39.02 13.22 22 RCVD_IN_MSPIKE_H2 55008 16.20 32.89 12.51 23 DKIM_VALID_EF 54100 15.49 29.93 12.30 24 FVGT_m_MULTI_ODD 52311 15.66 32.69 11.90 25 BAYES_40 44790 8.73 2.11 10.19 26 XMSubLong 43272 11.56 19.34 9.84 27 T_TM2_M_HEADER_IN_MSG 39887 11.28 21.27 9.07 28 XM_B_SpammyWords2 38595 14.51 40.48 8.78 29 T_KAM_HTML_FONT_INVALID 37828 11.99 27.32 8.60 30 USER_IN_DEF_DKIM_WL 36847 7.56 3.83 8.38 31 MIME_HTML_ONLY 35553 11.65 27.81 8.09 32 XM_Multi_Part_URI 30630 8.93 17.82 6.97 33 TR_XM_DK_Unsub 29778 9.74 23.17 6.77 34 XM_DKIMWhitelistDomains 21919 4.09 0.02 4.99 35 BAYES_60 21334 5.41 7.95 4.85 36 UNPARSEABLE_RELAY 20922 6.28 13.19 4.76 37 XMLngstWrd_00 19136 3.63 0.37 4.35 38 XM_Evil_Numbers_Gen 16904 4.45 7.19 3.84 39 RCVD_IN_VALIDITY_SAFE 16191 3.84 4.53 3.68 40 TR_MAX_INTL_RELAY 15016 5.58 15.41 3.42 41 XM_B_Unsub 14933 5.30 13.92 3.40 42 RCVD_IN_VALIDITY_CERTIFIED 14635 3.42 3.81 3.33 43 XM_H_GMP 14596 3.76 5.75 3.32 44 XM_DK_Undo_02 13814 11.49 49.31 3.14 45 LotsOfNums_01 13563 3.50 5.37 3.08 46 TooManyTo_001 13454 3.54 5.73 3.06 47 T_TooManySym_01 12870 2.81 2.29 2.93 48 TR_XM_BayesUnsub 12536 4.78 13.54 2.85 49 XMStrtUSub 12190 3.05 4.30 2.77 50 HTML_IMAGE_RATIO_02 11497 3.39 6.90 2.61 51 XM_B_SpammyWords3 11440 4.61 13.69 2.60 52 TR_XM_DK_Bayes 11338 2.16 0.27 2.58 53 TR_XM_DK_Bayes1 11252 2.14 0.24 2.56 54 RCVD_IN_MSPIKE_WL 11154 3.64 8.65 2.54 55 RCVD_IN_MSPIKE_H3 11154 3.64 8.65 2.54 56 BAYES_99 10922 9.14 39.32 2.48 57 LOTS_OF_MONEY 10804 4.32 12.74 2.46 58 BOTNET_IPINHOSTNAME 10486 4.26 12.74 2.39 59 TR_XM_DK_Bayes2 9961 1.89 0.16 2.27 60 IN_ZIMBRA_NJ_WHITELIST 9911 1.85 0.05 2.25 61 XM_H_Long_From01 9599 2.56 4.25 2.18 62 HTML_IMAGE_RATIO_04 9548 2.66 4.89 2.17 63 BAYES_80 8816 3.37 9.54 2.01 64 XM_UncommonTLD01 8764 3.01 7.59 1.99 65 BAYES_999 8467 7.10 30.56 1.93 66 RELAYCOUNTRY_META 8135 5.32 21.02 1.85 67 XMSubMetaSx_00 8091 2.49 5.43 1.84 68 TR_XM_SpammyWords4 7882 3.51 11.28 1.79 69 XM_Body_Dirty_Words 7508 2.63 6.79 1.71 70 XMNumbers 7406 2.47 6.00 1.68 71 MPART_ALT_DIFF 7314 2.34 5.41 1.66 72 T_TooManySym_02 7233 1.46 0.62 1.65 73 INVALID_MSGID 6961 1.32 0.13 1.58 74 TO_MALFORMED 6844 1.28 0.01 1.56 75 MSGID_NOFQDN1 6642 1.24 0.02 1.51 76 TR_XM_DKIM_Undo 6418 7.98 37.54 1.46 77 BAYES_95 6199 2.13 5.41 1.41 78 XM_B_Phish_Phrases 6123 1.80 3.67 1.39 79 MIME_HTML_MOSTLY 5970 1.80 3.80 1.36 80 MIME_QP_LONG_LINE 5940 1.43 1.76 1.35 81 BAYES_05 5746 1.23 0.91 1.31 82 FSL_BULK_SIG 5649 2.24 6.55 1.28 83 XMSexyCombo_05 5348 1.73 4.08 1.22 84 HTML_IMAGE_RATIO_08 5316 1.57 3.21 1.21 85 HTML_IMAGE_RATIO_06 5199 1.61 3.52 1.18 86 BAYES_20 5091 1.34 2.14 1.16 87 MAILING_LIST_MULTI 5015 1.17 1.31 1.14 88 TVD_RCVD_IP 5008 1.10 0.92 1.14 89 T_REMOTE_IMAGE 4839 1.15 1.39 1.10 90 XM_B_SpammyTLD 4797 1.41 2.87 1.09 91 RCVD_IN_IADB_LISTED 4775 1.02 0.73 1.09 92 XM_SPF_SoftFail 4629 1.95 6.02 1.05 93 TR_DCC_Bayes_99 4595 6.16 29.32 1.05 94 TR_XM_SpammyRelay 4435 3.88 16.89 1.01 95 XM_CamelCaseFrm001 4335 1.34 2.93 0.99 96 RCVD_IN_IADB_SPF 4286 0.91 0.64 0.97 97 RCVD_IN_IADB_SENDERID 3954 0.85 0.60 0.90 98 XMBSHREFv2 3932 0.77 0.22 0.89 99 FROM_EXCESS_BASE64 3890 1.14 2.32 0.88 100 RCVD_IN_IADB_DK 3888 0.83 0.61 0.88 101 MIME_HTML_ONLY_MULTI 3816 1.27 3.08 0.87 102 XM_PDF 3750 0.74 0.25 0.85 103 TM2_M_URI_OPT_OUT 3635 1.37 3.82 0.83 104 TR_XM_PhishingBody 3625 1.27 3.31 0.82 105 RELAYCOUNTRY_CA 3575 2.94 12.58 0.81 106 UNTRUSTED_Relay 3399 1.55 5.05 0.77 107 T_XMDrugObfuBody_14 3368 1.43 4.46 0.77 108 TR_XM_UnparsRelay 3281 2.01 7.72 0.75 109 XMDiploma_00 3249 0.92 1.77 0.74 110 TVD_SPACE_RATIO 3240 0.62 0.12 0.74 111 TooManyTo_002 3102 0.73 0.86 0.71 112 XM_B_Investor 3073 1.42 4.67 0.70 113 XMBdyGiftCard01 3049 0.78 1.14 0.69 114 XM_DK_Undo_01 3040 0.75 1.03 0.69 115 XMStockSpam_06 3040 0.89 1.79 0.69 116 IN_HORDE_ADDRESS_BOOK 3009 0.57 0.04 0.68 117 DKIM_INVALID 2964 1.27 3.97 0.67 118 TR_XM_SpammyWords5 2939 1.24 3.81 0.67 119 RCVD_IN_IADB_VOUCHED 2860 0.59 0.34 0.65 120 XMGappySubj_01 2671 0.52 0.14 0.61 121 T_XMDrugObfuBody_08 2659 1.03 2.95 0.60 122 T_TooManySym_03 2537 0.54 0.35 0.58 123 XMBody_95 2530 0.50 0.18 0.58 124 TM2_M_VERY_LONG_WORD 2460 1.04 3.23 0.56 125 BOTNET 2361 1.85 7.81 0.54 126 XM_SendGrid 2257 0.68 1.42 0.51 127 XM_GoogleGroups 2240 0.51 0.50 0.51 128 URI_HEX 2227 0.71 1.63 0.51 129 HTML_MIME_NO_HTML_TAG 2215 0.57 0.85 0.50 130 XM_B_COPY_HTML 2171 0.56 0.85 0.49 131 XM_OfRef6 2129 1.13 4.08 0.48 132 TR_Symld_Words 2124 0.56 0.89 0.48 133 XM_B_Unsub2 2089 0.68 1.63 0.48 134 XMGappySubj_02 2079 0.39 0.04 0.47 135 URI_NOVOWEL 2027 0.48 0.57 0.46 136 RCVD_IN_IADB_OPTIN 1968 0.41 0.22 0.45 137 TR_XM_Base64_M1 1928 0.55 1.05 0.44 138 XM_H_Long_From02 1907 0.53 0.94 0.43 139 XM_UB50 1892 0.79 2.41 0.43 140 XMBody_17 1841 1.76 7.82 0.42 141 USER_IN_WHITELIST 1786 0.33 0.00 0.41 142 USER_IN_WELCOMELIST 1786 0.33 0.00 0.41 143 MPART_ALT_DIFF_COUNT 1764 0.54 1.17 0.40 144 TooManyTo_003 1754 0.48 0.83 0.40 145 T_XMHurry_00 1737 0.74 2.28 0.40 146 TR_XM_SpammyWords2 1663 3.08 15.31 0.38 147 TR_XM_DK_SendGrid 1647 0.46 0.86 0.37 148 XMGenDplmaNmb 1647 0.49 0.99 0.37 149 URI_TRY_3LD 1622 0.67 2.02 0.37 150 T_MANY_PILL_PRICE 1593 0.30 0.00 0.36 151 RCVD_IN_PSBL 1584 0.41 0.62 0.36 152 SUBJ_ALL_CAPS 1534 0.74 2.53 0.35 153 DKIM_ADSP_CUSTOM_MED 1506 0.49 1.15 0.34 154 XM_B_SpammyWords4 1480 0.70 2.34 0.34 155 XMBrknScrpt_02 1436 0.59 1.78 0.33 156 RCVD_IN_BL_SPAMCOP_NET 1417 2.81 14.10 0.32 157 TR_MetaPhish_Combo_01 1396 0.41 0.81 0.32 158 TooManyTo_004 1390 0.40 0.80 0.32 159 XM_H_PHPMailer 1333 0.42 0.94 0.30 160 DIET_1 1315 0.64 2.20 0.30 161 XMSubMetaSxObfu_02 1293 0.30 0.32 0.29 162 XMSubMetaI_00 1245 0.44 1.16 0.28 163 HTML_FONT_FACE_BAD 1225 0.37 0.81 0.28 164 XM_B_REG_HTML 1214 0.37 0.78 0.28 165 XMSolicitRefs_0 1209 0.29 0.36 0.27 166 XM_ProductURIs 1195 0.37 0.80 0.27 167 SHOPIFY_IMG_NOT_RCVD_SFY 1193 0.38 0.88 0.27 168 TR_LOTS_OF_MONEY3 1165 0.94 4.02 0.26 169 HTML_TAG_BALANCE_BODY 1164 0.55 1.83 0.26 170 TooManyTo_005 1149 0.34 0.72 0.26 171 SpammyFromTLD_01 1128 1.11 4.99 0.26 172 XMPhish30 1109 0.47 1.43 0.25 173 T_FILL_THIS_FORM_SHORT 1102 1.06 4.74 0.25 174 T_XMDrugObfuBody_00 1053 0.39 1.07 0.24 175 FILL_THIS_FORM 1051 0.24 0.25 0.24 176 XMPhish08 1043 0.28 0.47 0.24 177 T_TooManySym_04 1016 0.22 0.16 0.23 178 PLING_QUERY 954 0.32 0.81 0.22 179 NML_ADSP_CUSTOM_MED 948 0.37 1.08 0.22 180 KHOP_HELO_FCRDNS 927 0.40 1.25 0.21 181 XMNoVowels 869 0.25 0.46 0.20 182 XMPhish14 848 0.26 0.57 0.19 183 XM_B_FormFill 833 0.17 0.06 0.19 184 SUBJ_DOLLARS 825 0.26 0.56 0.19 185 HELO_NODOT 821 0.22 0.36 0.19 186 FORGED_GMAIL_RCVD 821 0.34 1.05 0.19 187 HELO_NO_DOMAIN 821 0.22 0.36 0.19 188 RELAYCOUNTRY_AU 820 0.61 2.52 0.19 189 THIS_AD 813 0.41 1.42 0.18 190 XM_B_DNDMA 799 0.28 0.70 0.18 191 XM_B_COVIDMETA 798 0.22 0.38 0.18 192 HTTPS_HTTP_MISMATCH 792 0.27 0.65 0.18 193 XM_S_SubURI 790 0.18 0.17 0.18 194 TR_XM_SPAMCOP 777 2.22 11.46 0.18 195 DKIM_ADSP_NXDOMAIN 775 0.34 1.08 0.18 196 AD_PREFS 763 0.15 0.03 0.17 197 XM_ShortIntro_01 758 0.22 0.42 0.17 198 CTE_8BIT_MISMATCH 735 0.14 0.01 0.17 199 XM_Walgreens_Forge 682 0.13 0.04 0.16 200 RDNS_DYNAMIC 658 0.31 1.02 0.15 ----------------------------------------------------------------------